April 21, 2019
Home » hacking

hacking

Cyber Attack  / Malware
Emotet Trojan Hacked Uniden Commercial Site Serves
Moseley (Raam) Posted On April 12, 2019

Emotet malware

Uniden’s website was pursued to host a Word document that provides what appears to be a variety of Emotet Trojan gardens, also known as Geodo and Heodo.

Compared to Uniden’s main website offering a wide range of electronic products (radios, scanners, radar detectors, dash cameras, cellular boosters), cameras (IP, analog) and network video recorders (NVR) are the only solutions available in the commercial sector.

Emotet sitting nice and snug

The malicious Word file is stored in the “/wp – admin / legale/” folder and contains a macro that downloads an apparent variant to the Emotet URLhaus URL, a project from abuse.ch that collects, tracks and shares malicious URLs with security professionals and network administrators.

With the help of 265 volunteer security researchers, the URLhaus project has contributed to the dismantling of 100,000 websites active in malware distribution over a period of about 10 months.


The malicious document can supply three JavaScript payloads according to the URLHouse analysis and all of them have signatures for Heodo, another Emotet name.

All three are currently detected by 26 VirusTotal scanning antivirus engines. The malicious macro Word document is now detected as a threat by 20 anti-virus engines operating on the same service.

Macros in common suites, such as Microsoft Office and LibreOffice, are disabled by default, but cybercriminals have turned to social engineering to find out the victim is using the script and so start the malware download routine and give clear instructions on how to do so.

The company has been notified

Where the malware is being installed on the website is unclear, but it still exists at the time of writing, despite the company being notified of the situation on Twitter more than 24 hours ago.

The company has also received an email from BleepingComputer requesting a statement about this situation but received no reply at the time of publication.


Uniden is a major electronic equipment manufacturer, but the popularity of an organization and its size are no reason to discourage cybercriminals from hacking and storing malware.

Recently, threat scientist MalwareHunterTeam tweeted about a similar situation for his Computational Photography Lab, which had several malicious payloads, some of which were Shade ransomware, on the Northwestern University domain.


In this case it also took administrators more than a day to remove threats since the notification time.


Continue Reading
0
89 Views


Vulnerability
Phishing is a worse nightmare of security than ransomware or hacking
Moseley (Raam) Posted On April 3, 2019


The phishing attacks just don’t stop, more disturbing as ransomware, malware or hacking.

The biggest safety hairstrain for business and the hardest to deal with phishing and fake emails. According to the UK Government’s 2019 Cyber Security Breaches Survey, phishing attacks, whether through fraudulent e-mails or directed to fake Web sites, are the most common type of cyberattack.

Phishing emails –where assailants pose like trusted colleagues or other contacts, it is easy to send and difficult to fight the wrong ones. Much of the most important violations of data over the past few years –from the Sony Photos attack, the DNC hacking, to various attacks on banks all began with phishing emails.

“Protection against such violations or attacks requires both technical controls and good personnel awareness, including non-specialist staff that is typically targets of phishing assaults,” the report said.

Cyber security breaches 2019 Sophisticated; technical attacks like the denial of service are relatively less frequent in the report, as was the case in previous years. It also stated that there has been a decline in the number of organizations that complain of viruses, spyware or other malware attacks which suggest that such activities are less common or less visible, although it notes that denials are more likely to impact communications and education firms as well as large companies in general.

In addition to the most common attacks, phishing was also considered to be the worst violations or attacks. Where an infringement has resulted in data or assets loss, since 2018, the average costs for a cyber-attack on a company have increased to £4,180 by over £ 1,000, a report found.

Spam

The report also found that, as in previous years, employees were more likely to detect the most disruptive violation or attack than the use of cyber security software. For 63% of companies and 70% of charities, employees, contractors or volunteers reported the most disturbing breaches directly. It may also suggest companies that under-spend cybersecurity greatly; the Report says that there are wild variations in how many companies spend on the issue of security, though analysts warn that only about 2% of IT budgets go towards security.

“It shows the importance of staff vigilance as well as technological checks for the early determination of infringement.” While a typical organization will probably only suffer a few breaches per year, the report says many more will be experienced. This indicates, in addition to the overall decrease in the number of attacks reported, that the attackers change their approach.

“Attackers may target fewer enterprises, but they may attack these more or more often,” he warned. In the last 12 months, 32% of UK enterprises reported an attack on cyber security, down from 43% in the previous year. While less companies report violations because they are safer, the report also points out that other reasons exist.

Although they are less secure. One possibility, as mentioned, is that attackers will change their behavior with more attacks aimed at a smaller range of companies. This may explain why the number of companies identifying violations has fallen, but the number of attacks reported by firms identifying them has been increasing.

Alternatively, the General Data Protection Regulation (GDPR) might be introduced in May 2018. “GDPR may have changed what companies regard as a violation, or it may have made some companies less prepared to accept cyber security breaches,” he notes.


Continue Reading
0
50 Views


Data Breach
93 million user records from 8 companies, including GfyCat database is on sale in the Dark Web
Moseley (Raam) Posted On February 18, 2019

Data breach

Hacker sells third round of hacked databases on the Dark Web

A hacker named Gnosticplayers has made another set of hacked databases available for sale on a Dark Web marketplace.

This is the third round of hacked databases published by the hacker in the Dream Market on the Dark Web market. He previously published a batch of 16 databases containing 620 million user data and a second batch of eight databases containing 127 million user data.

The hacker today released eight more hacked DBs that contain data for 92.76 million users. GfyCat, the famous GIF hosting and sharing platform, is the biggest name in today’s batch. Each database is sold individually by the hacker on Dream Market. All eight together are worth 2.6249 bitcoin, which is approximately $9,400.

The hacker says he wants to sell more than a billion records of users and then disappear with the money. His current total is approximately 840 million records.

“my two main goals are: American pigs-money-downfall,” he told.

The hacker told that there are new leaks, including one from a cryptocurrency exchange.

The eight companies whose data are being sold today by Gnosticplayers are listed below:

No data breach was previously disclosed by any of the eight companies listed in the Gnosticplayers ad. However, many companies whose data the hacker has put up for sale in the last week have already admitted that they have suffered security breaches, making it very likely that the data he sells today is also legitimate.

gnosticplayers-round-3

Source: ZDNet

Furthermore, each listing was accompanied by the following message:

“George Duke-Cohan is a young and talented boy, instead of giving him a chance, the UK govt sends him to prison for three years. Now, he’s been told by the American government, that he faces 65 years for the offense he was already sentenced to three years in the UK. It means he will be judged twice ??

May this upcoming release of dumps serve as a reminder: When countries claim to respect their citizens, they have duty protect them. I wouldn’t be surprised whether George Duke-Cohan ends his life, the UK gov already destroyed him and doing this is like sentencing him to death. If he is not given a fair justice during the upcoming days, weeks, years, more data will be released….”

George Duke-Cohan is a British citizen who is part of the hacking crew of the Apophis Squad. He was arrested last summer and sentenced last December to three years in jail.

“We can also confirm that all account databases are strongly encrypted and salted, so there would be no plain text passwords in any compromised data,” a spokesman told zdnet today by email.


Continue Reading
0
215 Views


Data Breach
The U.S. Department of Justice charges 2 Chinese citizens with a massive breach of data
Moseley (Raam) Posted On December 24, 2018

U.S. Department of Justice charges

Hundreds of gigabytes’ of hacked data from 12 countries, including Canada

The Department of Justice has charged two Chinese citizens with an extensive hacking campaign to steal business data and trade secrets from entities in 12 countries, including Canada.

On Thursday, an indictment was unsealed against Zhu Hua and Zhang Shillong, who said prosecutors act on behalf of the main intelligence agency in China. Both were members of the Advanced Persistent Threat 10 group and worked for a company called Huaying Haitai, according to the charges.

Court papers filed in Manhattan federal court in New York City, alleging that hackers could break more than 45 companies and agencies in dozens of country.

The victims were in a variety of industries including aviation, telecommunications, pharmaceuticals and natural resources, including NASA and more than 100,000 U.S. personal information. Personnel of the navy.

The United States On Thursday, the British authorities condemned China for violating the 2015 agreement to curb business cyber espionage, slamming Chinese efforts to steal trade secrets and technologies from other countries and to compromise government computers.

At least 1100 EU diplomatic cables were stolen by Chinese hackers, USA. “China’s goal, just put it, is to replace the US as the world’s leading superpower, “said FBI chief Christopher Wray.”

We’re talking about government – sponsored actors engaged in illegal behavior. “No country poses a broader, more severe long – term threat” to the US than China, Wray said.

Hundreds of gigabytes’ violated

Both men were charged with conspiracy to commit computer intrusions, wire fraud conspiracy and worsened theft of identity. The prosecutors said that the hackers could steal data on “hundreds of gigabytes.”

Court papers say that they hacked computer service providers to gain access to business and government networks to steal business and intellectual property data.

The United States Officials said that hacking attempts started in 2006 and ended in 2018. Wray, Deputy Attorney General Rod Rosenstein and Geoffrey Berman of the United States, announced the indictment on Thursday, Manhattan attorney.

“We want China to stop its illegal cyber activity and honor its commitment to the international community, but the evidence suggests that China may not be willing to live up to its promises, ” said Rosenstein.” There is no free pass to violate US law simply because it is protected by a foreign state. “The RCMP had no immediate comment on the United States. Canadian companies ‘ charges or allegations.

Worsening tensions after arresting Meng?

The timing of the court action may worsen tensions between Western governments and Beijing following the arrest in Canada at the request of the United States of Meng Wanzhou, Chief Financial Officer of Chinese telecommunications giant Huawei Technologies.

Not long after Meng’s arrest, Chinese officials confirmed the arrest of two Canadian men — Michael Spavor and Michael Kovrig — in China on national security issues. According to Chinese officials, Michael Spavor and former Canadian diplomat Michael Kovrig were taken into custody in China this month.

Sarah McIver, a third Canadian, was also recently taken into custody in China (Associated Press / International Crisis Group / Canadian Press), but her arrest does not appear to be related to the arrest of two others, said Prime Minister Justin Trudeau on Wednesday. The United Kingdom and New Zealand both condemned the alleged global hacking campaign backed by China following the announcement of charges.

“This campaign shows that elements of the Chinese government do not respect China’s commitments made directly to the United Kingdom in a bilateral agreement in 2015, ” said the British government in a statement. Severe cyberbullying Last week, US officials the Justice Department, the FBI and the Homeland Security Department testified to the Judicial Committee of the Senate that China is working to steal trade secrets and intellectual property from the United States.

Enterprises to harm America’s economy and its own development. Chinese spying efforts have become “the most serious counter – intelligence threat facing our country today, “said Bill Priestap, FBI counter – intelligence assistant director. In recent months, the Department of Justice has brought charges against a number of Chinese intelligence officials and hackers. In October, a case filed marked the first time a Chinese State Security Officer was extradited to the United States for trial.

Starting in 2014, Zhu and Zhang were charged with spying on some of the largest companies in the world by hacking into technology companies to which they outsource email, storage and other computer tasks. In recent years, companies around the world have tried to reduce the spending on information technology and have increasingly relied on external contractors to store and transmit data.

When a managed service provider is hacked, it can provide attackers with access to secondary victims who are customers of that company and, according to experts, have their computer systems connected.


Continue Reading
0
230 Views